MetaMask Security Breach Leads to Ethereum Validator Removals by Lido
MetaMask has begun the process of removing Ethereum validators from its noncustodial staking service due to a security breach affecting part of its infrastructure. The company announced this development on September 30 and is currently working with external security experts to address the issue. Importantly, MetaMask has reported that it has not found any evidence indicating immediate risks to the wallets of its users.
Details regarding the nature of the hack, the specific infrastructure that was compromised, and the number of validators and ETH involved have not been disclosed. Furthermore, it remains unclear whether any signing keys or other sensitive information belonging to users or validators were compromised. MetaMask officials have emphasized that the withdrawals are a precautionary measure, highlighting that their staking service does not hold users' withdrawal keys.
The separation of user control over withdrawal keys is a critical aspect of the noncustodial nature of MetaMask's service. Although the infrastructure incident raises concerns, it does not necessarily imply that client funds or withdrawal keys have been lost. To date, there have been no public reports of losses resulting from slashing or withdrawals.
In response to the breach, Lido has provided additional information, indicating that MetaMask Staking has begun the process of unstaking its validators that participate in the Lido protocol. Lido has set a deadline of October 7 for the affected validators to exit the staking process. However, the overall withdrawal and re-entry process for validators may take significantly longer due to the queuing system in place for Ethereum validators.
Lido representatives have noted that ETH staked by the validators identified in a recent communication will be gradually returned to the protocol as the validators navigate the exit and re-entry processes. This entire procedure could take approximately 45 days, as validators must adhere to specific protocol rules.
Operational Costs and Validator Risks
As a result of the incident, there may be operational costs incurred during this process. Lido has acknowledged that some losses may stem from missed staking rewards, and validators that do not complete their exits on time could face penalties for downtime. However, Lido has not indicated that any validators were slashed, citing its decentralized node operator setup and an emergency fund containing over 6,750 stETH as safeguards against incidents involving its validators.
The validation service provided by MetaMask relies on infrastructure that was previously part of Consensys Staking. The latest announcement does not clarify which specific components of the Consensys Staking infrastructure are currently utilized by MetaMask.
Intelligence Reviewed
The security incident has also raised concerns across other sectors of the cryptocurrency market, particularly within decentralized finance. Stani Kulechov, the founder of Aave, has stated that Aave markets are operating normally and remain unaffected by the MetaMask Staking incident. As investigations continue, MetaMask has committed to providing updates as necessary, while Lido has confirmed that it is also conducting its own investigation.
The most pressing timeline for operations is October 7, the date by which Lido-supported MetaMask validators are expected to exit. However, MetaMask has not established a timeline for the conclusion of its security investigation.
